Privacy Policy
At Espavo, we respect your privacy and are committed to protecting your personal data. This Privacy Policy informs you about how we handle your personal data when you visit our website (including
It also informs you of your privacy rights under applicable data protection laws, including the European Union General Data Protection Regulation (EU GDPR) and the UK GDPR.
1. Important Information and Who We Are
Data Controller
Espavo is a 501(c)(3) Non-Profit Corporation registered in the United States, legislated by a Board of Directors:
-
Legal Name: Espavo
-
Postal Address: PO Box 34838, Las Vegas, NV 89133, USA
-
Privacy Contact Email:
webmaster@espavo.org
Espavo is the data controller responsible for your personal data collected via this website and related services.
External Links
Our website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
2. The Data We Collect About You
We may collect, use, store, and transfer different kinds of personal data about you, categorized as follows:
-
Identity Data: Title, first name, last name, username or similar identifier.
-
Contact Data: Billing address, delivery address, email address, and telephone numbers.
-
Financial Data: Partial payment card details and payment processing tokens (processed via PCI-compliant processors).
-
Transaction Data: Details about payments to and from you and details of products, seminars, and services you have purchased from us.
-
Technical Data: Internet protocol (IP) address, login data, browser type and version, time zone setting, location data, browser plug-in types, operating system, and platform.
-
Usage Data: Information about how you use our website, online seminars, products, and services.
-
Tracking & Advertising Data: Information collected via cookies, web beacons, Meta Pixels, and similar technologies regarding your browsing actions, interactions with ads, and responses to campaigns.
-
Marketing and Communications Data: Your preferences in receiving direct marketing from us and your communication preferences.
We do not collect Special Categories of Personal Data (such as health data, racial or ethnic origin, religious beliefs, or political opinions).
3. How We Collect Your Personal Data
We use different methods to collect data from and about you, including:
-
Direct Interactions: When you create an account, purchase seminars/products, subscribe to our newsletter (Soul Shifting, Sacred Connecting), fill out a support ticket, or communicate with us by email or social media.
-
Automated Technologies: As you interact with our website, we automatically collect Technical Data and Tracking Data using cookies, server logs, and tracking pixels.
-
Third Parties and Advertising Networks: We receive analytical and tracking data from third-party analytics providers (such as Google Analytics) and social advertising networks (such as Meta Platforms, Inc.).
4. Legal Bases for Processing Under EU/UK GDPR
We will only process your personal data when the law allows us to. Under EU/UK GDPR, our primary legal bases are:
-
Performance of Contract: Processing necessary to deliver purchased seminars, courses, coaching, or digital products.
-
Consent: Where you have explicitly opted in (e.g., subscribing to newsletters or accepting advertising cookies/Meta Pixels on our website).
-
Legitimate Interests: Where necessary for our business operations (e.g., website security, fraud prevention, business analytics, and improving service delivery), provided your fundamental rights do not override those interests.
-
Legal Obligation: Where required to comply with statutory accounting, tax, or legal requirements.
5. Cookies, Retargeting, and Meta Advertising Disclosures
Our website uses cookies and similar tracking tools to maintain website functionality, analyze usage, and support our marketing efforts.
Meta Pixel & Online Behavioral Advertising
We use marketing tools provided by Meta Platforms, Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA) and Meta Platforms Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), including the Meta Pixel and Conversions API.
-
How it Works: These tools allow us to track user actions after viewing or clicking a Meta advertisement, perform conversion tracking, create custom audience targeting, and deliver retargeted ads to visitors on Facebook and Instagram.
-
Data Processing: Technical identifiers, IP address, browser information, and on-site actions (such as viewing a seminar page or adding a product to cart) are transmitted to Meta.
-
Joint Controllership Notice: For certain features (such as custom audiences created from website visits), Espavo and Meta Ireland act as Joint Controllers under EU GDPR. Meta processes this data to serve targeted advertising and improve its advertising products.
-
Managing Meta Preferences: You can control or turn off personalized ads directly within your Meta account settings by visiting
.Meta Ad Preferences
Managing Cookies
When you first visit our site, you are presented with a cookie consent banner allowing you to accept or decline advertising and non-essential cookies. You can also adjust your browser settings to decline all or some cookies. If you disable essential cookies, portions of our website or membership portal may not function correctly.
6. International Data Transfers
Espavo is located in the United States. Personal data collected from EU/EEA or UK residents will be transferred to, stored, and processed outside the European Economic Area.
Whenever we transfer your personal data outside the EEA, we ensure appropriate safeguards are implemented in compliance with Chapter V of the GDPR:
-
Transfers to entities operating under recognized data privacy frameworks or framework agreements.
-
Execution of European Commission-approved Standard Contractual Clauses (SCCs) or UK Addendum provisions with third-party service providers (e.g., email service providers, hosting facilities, payment gateways, and advertising networks).
7. Disclosures of Your Personal Data
We never sell, rent, or trade your personal data to third parties for marketing purposes. We share your personal data only with trusted service providers acting as processors or joint controllers, including:
-
Payment Processors: PCI-compliant payment gateways (e.g., PayPal) to handle payments securely. We do not store full credit card account numbers (PAN).
-
Technical Infrastructure & Hosting Providers: Cloud hosting, IT security, and database management tools.
-
Marketing & Communication Tools: Email distribution platforms used to manage newsletter lists and customer support desk tools.
-
Advertising & Analytics Platforms: Providers such as Meta Platforms, Inc. and Google LLC.
-
Professional Advisers & Regulatory Authorities: Accountants, legal counsel, auditors, and law enforcement agencies when legally required.
8. Data Security and Data Retention
Security
We have put in place technical and organizational security measures to protect your personal data from accidental loss, unauthorized access, alteration, or disclosure. Access to your personal data is limited strictly to authorized personnel and processors who operate under strict confidentiality obligations.
Retention
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, tax, accounting, and reporting obligations. By tax law, basic financial and transactional records must be retained for at least 6 years after transaction completion.
9. Your Rights Under EU GDPR / UK GDPR
If you are a resident of the European Union, European Economic Area, or United Kingdom, you have the following rights regarding your personal data:
-
Right of Access: Request a copy of the personal data we hold about you.
-
Right to Rectification: Request correction of inaccurate or incomplete personal data.
-
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where there is no legal reason for us to retain it.
-
Right to Restrict Processing: Ask us to suspend processing of your personal data in specific scenarios.
-
Right to Data Portability: Request transfer of your data to you or a third party in a structured, commonly used format.
-
Right to Object: Object to our processing of your personal data for direct marketing or where we rely on legitimate interests.
-
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent (e.g., email marketing or tracking cookies).
Exercising Your Rights & Unsubscribing
-
Unsubscribing from Email Marketing: Click the "Unsubscribe" link at the bottom of any email communication.
-
Membership / DSAR Requests: Email
webmaster@espavo.org. (Note: Requesting complete account deletion will remove access to any registered products, online courses, or historical purchases). -
Supervisory Authority: You have the right to lodge a complaint with your local data protection authority in the EU/EEA or UK. However, we appreciate the opportunity to resolve your concerns directly before you approach an authority.
Last Updated: October 11, 2026